bug1002272:

The nullify potential unsafe (in security mind) functions was moved from box.lua
to separate functions which calls after init.lua. It allows call require,
os.execute, and another unsafe function in init.lua.