A runtime firewall for subroutine calls Erwan Lemonnier <erwan@cpan.org>