Give the Unsafe Browser its own /dev/shm instead of bind-mounting the host system's one (refs: #15023)