#597 - Add sandbox permission by default too