// to create, list, exec into, and configure the host sandbox). // Without this, the very first run fails with 403 Forbidden on // `list_sandboxes` / `begin_create_sandbox` during post-deploy.