Debian sandbox with non-root user