Claude code is sandboxed by default no?