Run sandboxed functions in a separate process

Some annoying book keeping required to make sure we always reap child processes. Please take a look.

Fixes #31.