Is Mandatory Sandboxing a Good Thing?