1. A computer-implemented method comprising performing computer-implemented operations for: intercepting an application programming interface (API) call made by an application external to a restricted application execution environment before the API call is to be executed within the restricted application execution environment; determining if the intercepted API call is blocked by the restricted application execution environment; in response to determining that the intercepted API call is blocked by the restricted application execution environment, modifying the blocked API call before the API call is executed within the restricted application execution environment; and executing the modified API call within the restricted application execution environment.