This idea is baked into the core of Deno. See, for example, https://deno.land/manual.html#permissionswhitelist.