Whoops: don't limit the sandbox data capability to the sandbox structure;
this should have been applied to the system-class data capability.