[Concept] [PATCH 07/18] sandbox: Extract init code into sandbox_init()