sandboxing haskell