It would be great if the Application Access tool allowed the selection of a Folder [or even a Group of Folders], rather than the whole namespace. Like confining an application, that I don't entirely trust, to a sandbox of sorts. That way, it can do it's thing, but not ever mess with anything outside of that sequester.
