Program specific permissions (separate from the user operating them) are part of the Linux permissioning system already right? That doesn’t seem like an issue to me.

I guess the main problem would be finding an API client that can easily plug into your harness, with a nice UI for turning specific APIs on and off.