I admit I haven't tested this, but I think that at least the comment is wrong now -- running in a chroot is no longer an indication of running in a sandstorm sandbox.  Or am I misunderstanding something here?