How would sandboxing curl help with vulnerabilities in your pdf reader?