Is sandboxing sufficient to contain rogue agents?by Matthew Green at A Few Thoughts on Cryptographic Engineering