Sandbox for executing (somewhat) untrusted Node.js