Why not let them run code in the backend? Obviously you wouldn't let them have access to everything, but you could allow them to write event responders or things like that, which run in a VM, which you control very tightly, and only give X cycles to per second, etc.

It could allow a whole lot more flexibility.