Basic sandbox for programs

See #3.