sci should be safe for execution of untrusted code right? ie a public cljs client sending sci strings to a clj server for evaluation

@jjttjj let's talk in #babashka about this