proper sandboxing now allows lua_State to be reused