Force rebuild if sandbox dependencies change
Bump upper bound on openssl-streams

Closes #73. Thanks to @hvr and @cartazio for the report.