Proc macro sandboxing

I think the bigger problem is that they are hard to write and sometimes break tooling.