1. A computer-implemented method of creating a private namespace, the method comprising: (a) receiving a request to create a private namespace that contains data for defining the boundary of the private namespace; (b) determining whether a principle associated with the current process has security attributes that are alleged in the request; and (c) if the principle that is associated with the current process has the security attributes that are alleged in the request, creating a container object that is uniquely identified by the data that defines the boundary of the private namespace.