That's why you should never allow loading Lua bytecode. Disallowing it is trivial, don't know why they didn't do it.