improvements to in-application-sandboxing