ParentFull threadranger_danger·--ro /usr does not apply to /usr/bin. change it to --ro /usr/bin and then cat will refuse to run.View on HN