fn jail_and_fork( keep_rds: Vec<RawDescriptor>, dir_path: PathBuf, uid: u32, gid: u32, uid_map: Option<String>, gid_map: Option<String>, disable_sandbox: bool, pivot_root: bool ) -> Result<i32>