sys-devel/bc: add support for --sandbox & USE=forced-sandbox
The dc tool has an ! command which allows for arbitrary system() calls
which is not ideal for processing arbitrary user scripts. First add
support for a --sandbox flag at runtime (like sed/gawk gnu tools),
then add a USE=forced-sandbox option so people can lock it down.
The patches have been sent to upstream, but considering how slow the
bc project tends to move, and their lack of a project site/git repo,
going to merge this now and just wait for upstream feedback.