Prevent unknown operations from calling arbitrary methods

[JamesMasonRC]

This should make it safe(er) to run rules from untrusted sources.

Note: the existing logic enforces that the first argument passed to an operation is always an array, which means exploiting the problem is more difficult than simply passing "eval" as an operation.

[JamesMasonRC]

@bhgames is this repo still maintained? :)