[PATCH v3 10/13] sandbox: Decouple program entry from sandbox init