added sandboxing notes