Run postfix pipe command under a different user than nobody
As documented, pipe(8) can execute as any user you tell it to - except root.
That, and only that, will execute as nobody.
yourscript unix - - n - - pipe user=<uid> argv=<yourexecutable>
The user= takes any existing unix user, and runs the pipe(8) instance under those credentials.