Add decorators that forbid filesystem and socket access