helper functions so we can stop repeating the logic for determining whether we are inside an app sandbox