After originally implementing this in Guile, I've ended up switching to bc, because I couldn't figure out any clean way of preventing the possiblity of Trojan horse attacks if I was using Guile.