do not allow sourcing local scripts, just executing

Signed-off-by: Mattias Andrée <maandree@operamail.com>