‘Genetic firewall’ holds engineered microbes captive