Added sandboxing to headnode