[PATCH v2 08/12] sandbox: Decouple program entry from sandbox init