sandbox-pod creating a 'seatbelt' profile on the fly and executing the given command through `/usr/bin/sandbox-exec`. This profile format is an undocumented format, which uses TinyScheme to implement its DSL.