@eq So a program might provide a scripting interface for plugins without allowing plugins to run arbitrary code on the system