Add methods to declare standard library access controls on external dependencies

Something that automatically implements the pattern described in the docs so you can declare that your 3rd party math library doesn't need access to the filesystem, for instance.

Not sure if this should be a whitelist or blacklist, and whether or not a library should declare what they want access to or not (and if so, how to make that declaration?)