Lots of improvements in the sandboxing space.

Now if Microsoft will start addressing the fact that VSCode remote ssh exposes your host to attack from the sandbox...