Isolation within the same domain

As an alternative you may also consider running minimal VMs:

A recent thread on this has some useful insights:

1 Like