The app front-end has user-scriptable features - I should have been more specific. My app has no back-end, and it is unacceptable to set up a back-end for the sole purpose of running luac on user scripts.