This approach could also be extended to Nix/nix-shell, but I have no
experience with that tool.  This might be of interest to anyone using a
Macintosh system and interested in isolation, as AFAIK Nix works on
those.

(On a related note, is it necessary to sandbox markdown rendering?  I
understand why org can be dangerous, but markdown shouldn't be able to
have any side effects?)

If these changes are fine, I can push them myself.

-- 
	Philip Kaludercic