put sandboxed $R path injection as a separate command so that we can toggle it on/off more easily