Make OFSandbox private

It is unclear whether the same API can be applied to other sandboxing
frameworks.