I (with some colleagues) developed a capability-based shell scripting language (http://shill-lang.org) that makes it easier to apply the Principle of Least Privilege to system administration tasks and also functions as a modular, programmable sandbox.

We're currently working on a port to Linux and a commercial version. If you're intrigued, I'd love to chat.