For sandboxing, as described in the README.