Enforce sandbox for ko/kd