Sandboxy mbox routines