remote code eval on supplement server side