Use `in_sub_process` to sandbox it.  Subprocesses are great for sandboxing :).