the planet tests should not count as random
allow looking at a pkg lockfile in the sandbox

(this comes up when building <pkgs>/ paths, something the
contract system does)