Reading the description, looks like a stricter chroot for purely-network applications, maybe?