also provide a system bus to the sandboxed application (but it is completely filtered...