The isolate utility

making that functionality be dependent on SELinux also means that people who want to use a different security module would have to have that module implement the same functionality or loose the capability to do this sort of thing.

this should not be dependent on SELinux any more than namespaces should be eliminated on theory that SELinux can prevent applications from accessing things they shouldn't