A language for safely manipulating code with binding