
We should put some or all services in a box, so that they can't harm others.
We could use chroot jails, but we should think carefully about how easy they'll be to break, using automated exploiting code that runs amok.
Personally, I lean towards running code we've examined or tested in some serious way, and not using any packages which have a sloppy security history (especially oh-my-god cock-ups, and the recurrence of old, serious flaws).
Virtualisation is another possibility, but I feel it may be more effort, and less use than just using proper, separate boxes.
Some scaffolding like web-create would be good for users, so we can automatically set up a mail user, a primary group, a home directory and so forth. The bog-standard useradd is insufficient.
Perhaps also things like picking a shell, &c.