uniter: open-port and close-port now sandboxed and validated