Add option to pass through arguments to brwap, use shlex for dry-run

src/errors.rs

@@ -24,6 +24,7 @@ pub enum SandboxError {
     ConflictingMode,
     UnknownConfigKey(String),
     ConfigPathNotAbsolute(PathBuf),
+    InvalidBwrapArg(String),
 }
 
 impl std::fmt::Display for SandboxError {
@@ -65,6 +66,9 @@ impl std::fmt::Display for SandboxError {
             Self::ConfigPathNotAbsolute(p) => {
                 write!(f, "config path is not absolute: {}", p.display())
             }
+            Self::InvalidBwrapArg(s) => {
+                write!(f, "invalid quoting in --bwrap-arg: {s}")
+            }
         }
     }
 }