Great write up. I never thought of no table before.
There's another option that's under active development, I don't know if it's ready for daily driver, portmaster part of the safing project but it can be used separatly. https://github.com/Safing/portmaster