it's possible that if we wanted to harden our sandboxing we'd need to increase the requirements there