Supporting uninstallation by restricting applications to a sandbox that can be cleaned up == locking down