Sandbox all user-defined JS code in IQL