Enable sandboxing, with appropriate entitlements.