sandbox is hard