I use the term sandbox loosely. They're on a VPS running as user hermes but they share everything with each other in their own user space. I could/should probably improve this. Maybe make them their own unix user. They are separated from the root-access agent.