Network namespaces are the right answer to per-process VPN on LinuxHow I almost locked myself out of my own EC2 box, and the guard that fixed it.