Types and readonly
There are some obvious things about access control that could be improved.
· lume
in the sandbox should be a clone
· SSH should not allow passing non-strings
· subnet(request)
function should only be available for the user subnet