Yes. It's looking like this: -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=allow \ -sandbox off \