I think that the problem might be best solved by extending the VM to have restrictions on what processes can change what objects/slots. It could be ids, groups of ids or whatever.
This might be prototyped by modifying slots assignment code.
This potentially allows multiuser ability.
You could also allow 'different' objects (e.g. lobby) for different processes (this also allows multiuser ability). This also avoids one process/user trashing another as well.
This is a good idea that has surfaced before--I think it has the germ of something quite powerful!