Linux sandbox helper entry point.
On Linux, zerobox-linux-sandbox applies:
zerobox-linux-sandbox
no_new_privs