Perl Security: 7. Restricted compartments: The Safe module
Opcodes masks

Safe allows us to specify which opcode sets should be allowed for this code to use using the permit, permit_only, deny and deny_only methods. 

The default opcode mask is ':default', which allows every opcode to be used.

Need more detail? Call perldoc Opcode