> Tab suggests (on IRC) that this should just be tied to sandbox="", which > seems reasonable at first blush. Sandbox is opt-in (which means we'd start revealing origins in existing settings without a warning); and has other serious constraints which preclude it from some existing use cases (e.g., no plugins). /mz