Sandbox confines the process, not the token | Dark Hacker News