Comment 4 for bug 1045986

For chromium-browser, we probably want to disable '-d'. An alternative would be to conditionally disable it only when the process is confined. This is brittle and likely want provide the protection we want.