firejail-opencode. By default opencode has access to everything the user has access to. This introduces a huge attack vector. This is an easy way to jail opencode.