by executing in a restricted environment