pilot.sandbox is now optional and vaguely defaults to $HOME

closed #69