Sandbox for client_sessions and tokens