sandbox: nested context support (BUG: colon defines don't work in nested contexts)