I'm going to use clojail to run scripts in a sandbox. And I'll also add a config option to disable this feature entirely.

But I'm not knowledgeable with security, so if anyone has a better idea, feel free to reply here.