put sandbox.h in the tarball, so the tarball builds