spec: fixes to match latest sandbox behavior

Signed-off-by: Pierre-Alexandre Meyer <pierre@mouraf.org>