hasSandbox

## Policies: Sandbox.

Like the `ISOLATED` policy, but applies a stronger sandbox; allows no host access for the guest language. This
means the guest language cannot load classes, access host I/O, or perform other potentially sensitive or
dangerous operations. Resources used by guest languages can be capped or otherwise controlled.

If available, hardware isolation is used; otherwise, software isolation is used.