Add sandboxing to Rhino contexts