I just run it in venv. What about just creating a new user and a python venv?

Headless is default, so that should not be a problem.