Limiting scope to specific scripts

Currently, allowing a Ruby application to have access to a keychain item means that ALL ruby scripts will have access to that keychain item. This seems like a big security hole.

Is there any way around this? Perhaps a way to compile a ruby script to a native binary that would then be recognized as a separate app?