I think what we want can be built on capability security. https://sandstorm.io/how-it-works is a more recent start on this sort of thing which saw a proof of concept in CapDesk back around the turn of the century.