Essentially you can't sandbox CPython at the interpreter level, it's too introspective (I do it anyway though, just as a first level of defence). You need sandboxing at the OS level.

Happy to go into more details by email.