How easy is it for a developer to "sandbox" a program?