Add a new runtime check for function execution. Should effectively stop the last know route through which "system" can be called.