Ensuring cabal clean/install is more robust with new sandboxing