i wonder if moving execution of rules into eval with a symbol blacklist would be a good incremental step toward using a rust skylark implementation.