and only now realized that actually if I had passed an empty dict as the globals, and regs as locals, the __builtins__ would have been injected into the empty dictionary :F