This adds a simple enum for somewhat granular description
of sandbox permissions. This will need to be evolved over
time.