Update defaults such that UsePrivilegeSeparation=sandbox