You can't really just let people load any old .so that could happily fopen() anything it wants on the host etc. They need to vet them.