packaged app with sandbox