zerostack contains --sandbox flags that forces bwrap usage on all shell tool usage