add -sandbox option to isolate exception between modules