1
Approval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.