You can write your own sandbox profile if you're so inclined... but not easily, and you can't force it into a container in the Library folder, for example.

sandbox-exec?