Sandboxing for GNU Make has never been easier