You could also just run the node.js process via a `systemd` service and sandbox ...

		JLCarveth 4 days ago \| parent \| context \| favorite \| on: Twake Drive – An open-source alternative to Google... You could also just run the node.js process via a `systemd` service and sandbox it that way using hardening directives.