A "secure-ish" Pi setup with permission, sandbox, and auto-review