SIO-1146 Checkers should be sandboxed

This change requires redownloading exec-sandbox into OIOIOI's
filetracker.

Change-Id: Iee35e71cc10ce9eb7b5d59268a3e9afbbf13e2c8