changes to make nosandbox mode a per-script user option (i.e., to make it opt-in _only_)