pub type Handle = u32;Expand description
A job-scoped reference to something the host holds open for a guest.
Job-scoping is a security property, not bookkeeping. A handle table lives and
dies with a single job, so a handle from one job names nothing in another.
That is why Command::Slice carries no path and needs no capability check
of its own: the check happened once, at Command::Open, and a handle
cannot be forged into a reference to another job’s data.