etc/cewrapper/user-execution.json

{
    "use_appcontainer": true,
    "pids_max": 14,
    "mem_max": 209715200,
    "allowed_paths": [],
    "allowed_registry": []
}