I've also been wanting to do that for wrapping non-trusted tools and agents. I did not follow up yet but have been watching a bit about what's happening around. I have seen a post in #C0BJ0GTE2 or #CDFP59223 about something similar to that idea, but I can't seem to put my hand on it again. I am interested in that too anyway.