expanded sandbox capabilities