pub fn run_in_sandbox( new_root: &Path, prepare_sandbox: impl Fn() -> Result<(), String>, run: impl Fn() -> isize, ) -> Result<i32, String>