Comment by reactordev

yes, you would setup namespace and unshare it once mounted to isolate the sandbox so root only sees the sandbox / and not your /