Sandbox hardening

By default this application does not have a very strict sandbox. There's been suggestions on how to isolate it further but these items have not been included by default due to compatibility concerns