Allowing root/other users to setup a sandbox on behalf of another user