[fulafel]

You could use a sandbox process and use some existing out of process calling system for it. This also disentangles the malloc systems of the modules.