I do not have much of anything to say, but I did come up with an idea. One thing that Fuchsia (operating system) does is that parents are able to lock down the permissions when spawning childs. For example, if a child is spawned with no I/O permissions, that child will have all those permissions removed, and any child that spawns from that will have the same restraints.
Could Lunatic support something like this on the far future?
EDIT: I just read the FAQ and looks to be heading that way. Awesome.