How is that different from putting an app in a chroot jail or container?