Safe in the sandbox: security hardening for Cloudflare Workers