etc/cewrapper/user-execution.json

{
    "use_appcontainer": true,
    "allowed_paths": [],
    "allowed_registry": []
}