Um, this is making the core safe, i.e. making sure there's nothing
intrinsic to Python classes or the interpreter core -- the language
itself -- that lets you break out of restricted mode.
The *modules* will be whitelisted piece by piece as you suggest.