We have the option to decide between classic and strict confinement: https://docs.snapcraft.io/reference/confinement

However, since we rely on polkit, it seems we have to choose classic confinement for the time being, until a polkit backend is implemented: https://forum.snapcraft.io/t/polkit-policy-support/3865

With classic confinement I'm having troubles loading some shared libraries. The snap ships them (since they're included in the stage-packages list), but the can't be found at runtime.