so that I can run untrusted code and limit it's functionality