- Update sandbox policy (bring back inclusion of `/lib` to enable glibc resolver - Better error handling using new `curl_util` library Signed-off-by: Christian Blichmann <cblichmann@google.com>