Whalebrew[0] has been doing this for years, though Subuser appears to provide more configuration/access control.

[0] https://github.com/whalebrew/whalebrew

It's not a new nor crazy idea...Jessie (jessfraz.com) talked about doing this[1] in their desktop environment back in 2015.

https://blog.jessfraz.com/post/docker-containers-on-the-desk...