Opaque process-containment lifecycle.
Containment is stronger than a process group: every descendant remains in
the boundary even when it reparents, creates a new session, or changes its
process group. Linux strict mode is implemented by
ExecutionPlane.Process.Containment.SystemdUser.