Unless you give them a tool which lets them execute arbitrary code in the running image.

Or at least this works wonderfully in Clojure via the nREPL.