FileVault plus running 'pmset destroyfvkeyonstandby' in Terminal should prevent this. Destroying the FileVault key should encrypt the disk, likely stopping things from running while asleep. I haven't tested this though.