Add more sandboxing, make sandboxing configurable