lsa_sandbox_violation() will take desired access too