@kugel- Just a question thats only tangentially related to this PR, but you mentioned it in the initial commit message, if a flatpack can't execute random commands, how does an IDE that is compiling and running all sorts of weird code work as a flatpack?