A sandbox can run as root by default

Create it with user: "root" (--user root in the CLI, user= in Python, .user("root") in Java, User: "root" in Go), or set it later with :update, and its commands, background processes and terminals run as root, through its passwordless sudo, with no sudo in front of each one. A call can still name user: "sandbox". Forks and copies of its snapshots run as root too; files written through the files API and SSH logins stay the sandbox user's. A sandbox's details include its user. See who you are.