@iska wdym implemented into guix environment? It just uses cgroups + X isolation