Comment by pram

MacOS should really have some kind of capabilities based Darwin containers, rather than what seems like a giant tangle of blacklists.