Do a dedicated computer and only give it access to a few things.