I think the idea is to not run programs as root in the sandbox.