Add note about sandboxing to README.md, and use normal quotes instead of smart quotes.