SSCSM is still not implemented, after years.
First, implement a SSCSM that has just client-provided (checksumed, to avoid cheating) builtin (SSCSMCPB).
=> We can postpone sandboxing, because code is not untrusted.
- API is very unstable and incomplete at first anyways, so mods shouldn't really use it right away anyways.
- Having SSCSMCPB means we can implement hardcoded engine features in lua. => This automatically generates API features.
- It makes implementing new features easier, and more future-proof. I.e. for a new feature, implement SSCSM API, and a packet for the SSCSMCPB so that you can already use it in SSM.
- We have something working, and can take time for the sandboxing, now with motivation, because there's immediate benefit.