Execute user config in sandbox

Give the user-config script a global environment which does not
have private methods or necessary imports, and copy only known
configuration items into the globals of the config module.

Change-Id: I4e31d05c1ff6f55f96e1ceffcddf06e54216c25b