Evaluate cargo-rubber

[Shnatsel]

There is a proof-of-concept implementation using https://github.com/containers/bubblewrap as the sandboxing backend

See https://www.reddit.com/r/rust/comments/hjxh2a/partially_sandbox_your_rust_builds/