naming conventions tweaks, simple sandbox with privileges WIP
Sandbox privileges applied recursively, minor tweaks