nsISandboxService should be instance