Codex already uses sandbox-exec on macOS :)