They may have sandboxed it, using something like lxc-containers.