Ask HN: How can I take my Astrill VPN on a leash?

I live in China, after having always "build" my own proxy I got sick of it and signed up for astrill. Outstanding product, decent service. Call me paranoid, but how can I take the software on a leash? I would prefer to limit the rights of the software and folders it can access. I do this with Skype and would want the same with astrill. The last time I tried it broke and was very hard to get the VPN software working again. Does anyone run the Astrill VPN Software with app amor and has an app armor profile? Or suggestions for the config file?