Sandbox feature dependencies:

- seccomp, nonewprivs, protocol - kernel 3.5 (done)
- noroot - kernel 3.8 (done)
- overlayfs - kernel 3.18
- nox11 only with a network namespace (done)
- net= doesn't work on wireless interfaces
