use SandboxedEnvironment instead of Environment