Using CageFS, users are locked into a virtualized file system (a virtual jail cell). This means if other users get hacked, your share of the server will be isolated and protected.