safer environment for locally executed scripts