diff --git a/cackle.toml b/cackle.toml
index 44389eb..21d81da 100644
--- a/cackle.toml
+++ b/cackle.toml
@@ -70,7 +70,6 @@ allow_proc_macro = true
 allow_unsafe = true
 
 [pkg.serde]
-allow_unsafe = true
 allow_apis = [
     "fs",
 ]
@@ -198,9 +197,6 @@ build.allow_apis = [
 [pkg.twox-hash]
 allow_unsafe = true
 
-[pkg.stable_deref_trait]
-allow_unsafe = true
-
 [pkg.winnow]
 allow_unsafe = true
 
@@ -222,18 +218,12 @@ allow_unsafe = true
 [pkg.ruzstd]
 allow_unsafe = true
 
-[pkg.toml_edit]
-allow_unsafe = true
-
 [pkg.memchr]
 allow_unsafe = true
 
 [pkg.once_cell]
 allow_unsafe = true
 
-[pkg.addr2line]
-allow_unsafe = true
-
 [pkg.object]
 allow_unsafe = true
 build.allow_apis = [
@@ -257,7 +247,6 @@ test.sandbox.make_writable = [
     "test_crates/custom_target_dir",
 ]
 test.sandbox.allow_network = true
-test.allow_unsafe = true
 
 [pkg.clap_builder]
 allow_apis = [
diff --git a/src/config/built_in.rs b/src/config/built_in.rs
index fa07718..865162f 100644
--- a/src/config/built_in.rs
+++ b/src/config/built_in.rs
@@ -10,13 +10,17 @@ pub(crate) fn get_built_ins() -> BTreeMap<ApiName, ApiConfig> {
         perm(
             &[
                 "std::fs",
+                // Darwin is not yet supported
+                //"std::os::darwin::fs",
                 "std::os::linux::fs",
                 "std::os::unix::fs",
                 "std::os::unix::io",
-                "std::os::wasi::fs",
-                "std::os::wasi::io",
-                "std::os::windows::fs",
-                "std::os::windows::io",
+                // WASI is not yet supported
+                //"std::os::wasi::fs",
+                //"std::os::wasi::io",
+                // Windows is not yet supported
+                //"std::os::windows::fs",
+                //"std::os::windows::io",
                 "std::path",
             ],
             &[],
@@ -26,7 +30,12 @@ pub(crate) fn get_built_ins() -> BTreeMap<ApiName, ApiConfig> {
     result.insert(
         ApiName::from("net"),
         perm(
-            &["std::net", "std::os::wasi::net", "std::os::windows::net"],
+            &[
+                "std::net",
+                "std::os::linux::net",
+                // Windows is not yet supported
+                //"std::os::windows::net",
+            ],
             &[],
         ),
     );
@@ -39,8 +48,10 @@ pub(crate) fn get_built_ins() -> BTreeMap<ApiName, ApiConfig> {
         perm(
             &[
                 "std::process",
+                "std::os::linux::process",
                 "std::unix::process",
-                "std::windows::process",
+                // Windows is not yet supported
+                //"std::windows::process",
             ],
             &["std::process::abort", "std::process::exit"],
         ),