restrict builtin_sub