Any specific reason why a normal user is not enough? Create a new user without sudo permissions and set process limits in the kernel to lower levels so that processes can not consume all resources. Then install local Perl for the user. I find it quite difficult to harm an Unix-like OS without deliberate attempt.