Sandboxed environment for untrusted code / templates, using zope.security and RestrictedPython