Document sandboxing details

[zombiezen]

The derivation specification may already cover this, but I want to keep this task open to investigate whether there's anything else about the sandbox worth documenting.