you can get most of the way there with a custom se...

# announcements

[rm]

you can get most of the way there with a custom security manager and/or Policy, but the main thing that's lacking is a way to prevent individual threads from consuming too much heap or CPU time