Simplistic is actually good - but I don't think that any (?) of the available current OSes is able to contain a program that can run once as administrator right? If I'm not recalling it incorrectly, BSD jails, linux cgroups, user filesystem permission, docker, vm's - and that's at the surface.