mandatory access control rules for python-exec'ed scripts?

[l29ah]

How do i assign different profiles for different python programs behind the wrapper? Apparmor at least doesn't seem to be able to handle symlinks for that matter.