compiler: introduce variable jail