I\'m working on an application in C which manages multiple sandboxed environments, each in its own kernel namespaces. These environments are eventually intended to be as iso