Comment by dumbfounder

Controlling which tools it has access to is called sandboxing.