Sandboxing Local MCP Servers