I hadn't added this before I posted here but Lua does have a way to limit vm instructions so I've added a pretty conservative limit