Dedicated user account does not work as eventually all your code and data will move under that.

I run it in an ephemeral container sandbox (https://github.com/ashishb/amazing-sandbox) which has access to the current working directory and it drastically limits the attack radius.