If the code is coming from untrusted sources, definitely look into using Safe.pm and restrict the hell out of the permitted opcodes.