WIP making C sandboxing work