The cap-primitives crate provides primitive sandboxing operations that
cap-std and cap-async-std are built on.
The filesystem module, [cap_std::fs], currently supports Linux, macOS,
FreeBSD, and Windows. WASI support is in development, though not yet usable.
The networking module, net, is not yet usable.