Sandbox off by default