As chrome sandboxes flash, I wonder how much hassle it would be to only allow a small subset of fonts through?