I think Safe should do the job for you. It allows you to define what functions are allowed to run and what are not by setting up an ops mask. Thats about as good of a sandbox it can get. Of course as always:

Check your input to make sure that nothing can slip by that will compromise your system.

BMaximus