seems like you’d need to be able to “sandbox” C libs/headers/etc