Anyone wanting to contribute an ipfw modification to allow you to set
permissions on firewall entries is asked to contribute. Its an idea
I've bounced around for ages but not found nice semantics for.
I'd also strongly suggest at looking at the POSIX.6 work which is designed
to cleanly handle issues like fine grained security. Remember however that
fine grained security can also simply mean lots of smaller leaks