YARN support for container isolation on Windows

There is no ContainerExecutor on windows that can launch containers in a manner that creates:
1) container isolation
2) container execution with reduced rights
I am working on patches that will add the ability to launch containers in a process with a reduced access token.
Update: After examining several approaches I have settled on launching the task as a domain user. I have attached the current winutils diff which is a work in progress.
Work remaining:

• Create isolated desktop for task processes.
• Set integrity of spawned processed to low.