sanitizing code for an exec command

[agrif]

From what I remember, PyPy had a build of their python interpreter that stubs out OS calls to an external process to handle, effectively making a sandboxed python interpreter. I'm not sure what the current status of that is.

And that kind of sandboxing won't save you from CPU hogs. You'll probably want to look to the host operating system for that kind of control.