The cap-primitives crate provides primitive sandboxing operations that
cap-std is built on.
The filesystem module cap_primitives::fs, the networking module
cap_primitives::net, and time module cap_primitives::time currently
support Linux, macOS, FreeBSD, and Windows. WASI support is in development,
though not yet usable.