[minibcs-policy] I hate everything. Give sandbox_t access to proc.