Use a system property to determine whether we're sandboxed