/usr/local/bin/sandbox-pod
sandbox-pod creating a 'seatbelt' profile on the fly and executing the given command through `/usr/bin/sandbox-exec`. This profile format is an undocumented format, which uses TinyScheme to implement its DSL.