Goes against the discomfort grain, but maybe throw it in a Docker container so people can run it "safely"?