Move sandboxing API to a new branch

The API remains, but will be made private and keep being used by
everything in utils. Once the API is stabile, it will be made public
again.