install helper executables in separate sandbox