Sandboxing (stack limit, instruction count, time)