Freeze all the global objects we allow access to and shadow all node objects we don't

Still some node objects that need to be shadowed in the future by
moving file and network access out of the sandbox.