[yjftsjthsd-h]

FWIW: On Linux, I use firejail to do this.

But it's sweet to have natively:)