...instead of the manual firejailing that Wikimedia currently uses. Moritz suggested to start with this one since it has a pretty low usage.
https://phabricator.wikimedia.org/source/operations-puppet/browse/production/modules/mediawiki/files/mediawiki-firejail-lilypond
https://phabricator.wikimedia.org/source/operations-puppet/browse/production/modules/mediawiki/files/mediawiki-converters.profile