This article makes me long for chroot or FreeBSD’s Jail. I’m hoping CoreOS’ Rocket addresses that issue.