Manages chroot-based sandboxes
