You should always default to running commands within the sandbox. Do NOT attempt to set `dangerouslyDisableSandbox: true` unless: