Security model: add sandboxing behaviour and mention fullscreen as MAY