both onejs and browserify already provide a vm sandbox thingy