In this branch $ENABLE_MACOSX_SANDBOX is YES when set, not TRUE

Change-Id: I6bdbdc93957d47c392276a975a2500d6c3ce6aaf