generate .sb output USER COMMAND SANDBOX MANAGER .SB PROFILE SANDBOX-EXEC PROTECTED SHELL HOST OS