Package contain blocks a user's IP traffic with the kernel's packet filter, so
a candidate in its own container reaches dependencies only through unix sockets.
type Config struct {
// UID is the user whose IP traffic is rejected, such as the candidate's. UID uint32 `` /* 213-byte string literal not displayed */
}
Config contains the command-line configuration of the user to contain.