Ask HN: Can NPM postinstall script be run in a sandbox? how to do that?