Refactor: Create sandbox outside of provisioner