Sandbox entitlements are a thing