... does a chroot count? XD Because that is where it's running.

Still, valid point, and why I am looking to migrate my coinage stuff completely into VMs; btc/cln+plugins will go into LXC, the rest into docker. Putting CLN plugins into docker is annoying so I will just take the in-between way. o.o (And unfortunately, I need four plugins for zeus, zapping, getting zapped, and my zap address...)