fn create_plugin_jail( root: &Path, log_failures: bool, seccomp_policy: Option<&Path>) -> Result<Minijail>