Sandbox and separate user instead of VM but sandvault is good for this and does auto install (full disclosure: have made some PRs to it).

https://github.com/webcoyote/sandvault