Sandbox executor configuration.
Readonly
Default policy to use.
Whether to log policy violations.
Whether to enforce policies (false = warn only).
Sandbox executor configuration.