run user script in a sandbox.