sandboxing for Homebrew