Sandbox the Unsafe Browser

Originally created by Tails on #5422 (Redmine)

When a container-based solution becomes a viable, secure solution for creating isolated jails, the chroot approach used by the unsafe browser will be easily adaptable to that for added security by isolation.

Alternatively, AppArmor confinement should be considered.