We have implemented our own LLVM-based ahead-of-time Wasm compiler, named aWsm, offering configurable sandboxing, optimized for performance.