The people at #Spritely have a project called #Goblins that implements object capability security.
It's implemented in Guile (also Racket), which can be learned quickly by eager students, particularly since you only need a subset of the language to play with #Goblins