https://www.petervanderwoude.nl/post/easily-enforcing-specific-windows-sandbox-configurations/