fn create_plugin_jail(
    root: &Path,
    log_failures: bool,
    seccomp_policy: Option<&Path>
) -> Result<Minijail>