New class: FileMonitor

Conditionalize the manpage of launchd.plist(5)

add supervision via daemontools

New class: Manifest

Reset GOT_SIGCHLD in an error codepath

Fix some container tests

Avoid daemonizing when running the testsuite

hook firewall changes into ::Container. All tests pass

apply firewall changes for real

new class: Firewall

Basic support for proxying TCP connections to a container

Fix problems with running pkg(1) outside the jail

Try to keep text from overflowing

Add a rationale doc

More work on containers. It is now possible to install packages in containers, and run post-creation commands. The socket-passthrough stuff does not work; will need to use port forwarding in the firewall or haproxy