Fun fact: the sandboxing rules are defined using scheme!