How to Apply Least Privilege Principles When Configuring APL Runtime Environments?

Given that many APL implementations are proprietary and some are free for non‑commercial use, what steps should administrators take to configure APL runtime environments following the principle of least privilege while preserving required functionality? Include considerations for file‑system permissions, process isolation, and auditing.