Merge "Add support for switching off sandboxing via device config flags" into sc-dev