sandbox domains should be allowed to use libraries which require execmod