Debian Bullseye and Linux Containers

Currently strict user isolation is achieved using chroots, the next logical step would be to switch to using Linux Containers, since this would be a major rewrite it probably makes sense to look at doing this for Debian Bullseye, which is probably due in 2021.