Treat user-provided functions with suspicion.