PVF worker: add security restrictions to child job process with no exceptions #2164
Description
In #1685 we are adding new job processes, forked from the workers, that perform the jobs. The worker's already taken care of reading what it needs from the socket and filesystem, so we can further lock down the job process with no exceptions, if it doesn't hurt performance to do so.
Related
Follow-up to #1685.