You could although honestly you'd have to do it inside of a non-user-modifiable environment. If you were using FreeBSD, you'd setup an SSLVPN to the parent host

You could although honestly you'd have to do it inside of a non-user-modifiable environment. If you were using FreeBSD, you'd setup an SSLVPN to the parent host IP and have SSH enabled over that. Then you'd put in a firewall rule on the parent host that denied ssh out from the jail. Then you'd run your app/etc under a Jail. You could do some of this with securelevels too but if they ever popped the kernel you've got a bit more "gameover".