I feel like Deno would be perfect for this because it already has a permissions model enforced by the runtime