untrusted code can run as non-privileged user without changing the code; improved Settings and Dashboard