Sandbox confines the process, not the token | Hacker News Reader