Currently it's far too easy to completely blow up the entire rpm process from -p <lua> scriptlets as they execute within rpm itself. At least the following can seriously mess up things:
* posix.chroot() - should never be allowed from lua scripts
* posix.fork() - somewhat questionable but potentially useful.. verify its "safe"
* posix.exec() - unless posix.fork() is used first the executed program will replace rpm itself
* os.exit() - unless posix.fork() was used, it'll terminate rpm itself
Figure a way to make them safe or disable when run from scriptlets.