sandboxer as singleton. fix #11