If you were building a sandbox for untrusted code, would you give it access to an artifactory instance outside the sandbox?