Not uncommon to have a python program that loads external half-trusted configuration, that must be sandboxed in capabilities. For in-house stuff, totally agree

Not uncommon to have a python program that loads external half-trusted configuration, that must be sandboxed in capabilities. For in-house stuff, totally agree, just use the python code itself as the configuration.