Use native cabal sandboxing