sandbox: git-unlock is mature enough