feat(policy): allow non-root sandbox identities (#2785)