You could maybe block some of the Lua API such as the filesystem (otherwise people could install viruses and stuff onto your computer), platform (opening dangerous websites), and HTTP (spam spam spam).