TODO
----
-* Finish src/libcaptive/sandbox/ CORBA interface
- * Implement backward GIOChannel CORBA interface
-* reentrancy of captive_init() to return non-static GObject captive_vfs
+Why native NT autocheck (=w/o errors) the volume after our DISMOUNT_VOLUME?
+
+strict ulimit (rlimit) of sandbox child