Remove scrub_output, restrict extension context access