Function exec 

pub fn exec(profile: &Profile, argv: &[String]) -> String

The helper (speccoder __sandbox <profile> -- argv…): confines this process with profile and becomes the command, keeping this process’s pid, standard streams and environment, leading a session of its own that the command’s processes cannot leave (the caller ends it with crate::session::end); returns only on failure, with the reason.