More and more, I want a hard sandbox on these. For those of a similar security mindset, how are you sandboxing?