:lipstick:
Use secure update methods in sandbox
Simplify forbidden creation case in sandbox spec
Use secure destroy method in sandbox