sandboxing some more