Just move the expired backups into a purging directory and then have the deletion ...

... process run in a sandboxed process which can access only that specific garbage site.