sandboxed lua

Ignore-this: 6ad3fafe9546a74ce1752e32b508aca2

darcs-hash:20131119201335-c21fe-e05b4bfa741edad8ad0d4bf982084599b714866c