Yes. All of this is already possible in just Lua (limiting calls
can be done using debug hooks). The proposed "feature" is oddly
specific, tailored to a certain usecase.
What I would really like to see for simplifying sandboxing are
limits usually done at a process level: Limiting memory usage or
CPU time of Lua programs (including invoked builtin C funcs). But
I suppose that's out of scope for Lua.
This is done in Lua using _ENV variable and a parameter in load function for the environment.
Pass a table to that function that doesn't have function don't want users to use