OpenStack library for privilege separation