sandboxed modules, ala YUI