@feld there should be a standard saying how programs specify what they're limited too.
Also note, people do it uncleanly with firejail or bubblewrap now. For instance ~/iso/$ROLE becomes the $HOME directory for some of my programs. But like i do that to programs, dunno if doing it to the window manager is practical.. @ryan_harg @fasnix @yuki2501