These sandboxes and service proxies already exist. See Nvidia OpenShell.
Oh indeed, it's been a while since I looked at openshell - didn't realize it did credential injection thanks for sharing.
Oh indeed, it's been a while since I looked at openshell - didn't realize it did credential injection thanks for sharing.