There's actually a project called Subuser https://github.com/subuser-security/subuser which uses Docker to secure desktop applications.