provision.sh: remove sandbox_shell from /etc/shells, bad idea