autodetect sandbox on ac. currently detects as rlimit