Suricata

So this only affects output scripts, so its not that critical. The package global is not available in rules, and trying use it in rules does fail.

I guess the question is if we should allow it in output scripts, which aren't strictly sandboxed. I think ideally the path should be fixed to what the user sets, and perhaps not allow it to be set in an output script?

But a complex output script may break things into multiple files and want to set the path accordingly so it "just" works - something I often do with Python scripts.

My thought is to not make this private, see if we can even fix this while allowing output scripts to access to system modules, etc.