Derived from chazlevers docker-jail.