run native code via sandbox