This provides more sandboxing, but also means that you don't have
to manually drop `SandboxedRegExp` objects that are no longer in
use. Instead you just rely on the garbage collector to drop the
object and the underlying WASM instance that it uniquely owns.