Proper sandboxing of workers