-sandbox mode by constructor argument + tests