this works with megapixels-next (at least, with sandboxing disabled). however it breaks pipewire: will investigate