fix sandbox issues with new executor