I'm looking into what it takes to fully Capsicumize a Python process in FreeBSD. It's not just about the file descriptor rights and filesystem visibility. There are distinct dependencies by Python modules on system calls which may not be CAPENABLED. I ground it out on subprocess for a start. Whist Python 3.12 os.execve() (and thus os.exec*()) shims to fexecve() and SHOULD work if $PATH is modified to be relative, there are no such guarantees for the subprocess module.