Isn't that exactly what gvisor does?