i'd like to add a first pass at confinement of apps soon, so you can run apps with less trust.