Hardened the sandboxing with double checking and made nofiles mandatory
Missing hash in ./do and prevented it from infinilooping if it can't find a working nodejs