renamed root.tmp => root.sandbox and added sandbox cleanup routine