Comment by nsagent

Wow, nearly every top level comment is about coding their own version of this.

I'd love some perspective on what problem this setup solves and how do you address sandboxing.