Compose foreground sandbox process lifetimes

crates/lazaret-runtime-supervisor/src/sandbox.rs

@@ -502,6 +502,8 @@ fn build_runsc_command(paths: &RuntimePaths) -> RunscCommand {
                     .to_str()
                     .expect("validated runtime path remains UTF-8")
             )),
+            OsString::from("-rootless"),
+            OsString::from("-network=host"),
             OsString::from("-ignore-cgroups"),
             OsString::from("run"),
             OsString::from(format!(