Which of the following would provide a safe environment for an application to access only the resources needed to function while not having access to run at the system level?

{} [+]