anchor.diff:  (defun subuser-nsjail-x-application
     (command
       &key display
  -    environment home tmp name locale locale-archive
  +    environment home inner-home tmp name locale locale-archive
       (slay t) (wait t) (netns t) verbose-netns
       network-ports network-ports-in
       netns-tuntap-devices
  
positive.code:                  (list "setfacl" "-m" (format nil "u:~a:rwx" uid) home))
                 home)
               home))
       (directory (if (and home cd-home (not directory)) home directory))
       (tmp (if (eq tmp t)
              (let* ((containing-directory
                       (format nil "/tmp/subuser-tmps-~a/"
  
negative.code:                     ("SOCKS_PORT"    ,(format nil "~a" socks-proxy))
                      ("SOCKS_VERSION" "5")
                      ))
                ,@(when inner-home `(("HOME" ,inner-home)))
                ("PATH" ,path)
                ("LANG" ,(or locale (uiop:getenv "LANG") "en_US.UTF-8"))
                ("LOCALE_ARCHIVE"
  