sandbox: throw error if no program provided to execute