A Taste of Capsicum: Practical Capabilities for UNIX. (Communications of the ACM, 2012)