The Oslo Rootwrap allows fine filtering of shell commands to run as `root`
from OpenStack services.
Unlike other Oslo deliverables, it should **not** be used as a Python library,
but called as a separate process through the `oslo-rootwrap` command:
`sudo oslo-rootwrap ROOTWRAP_CONFIG COMMAND_LINE`