According to recently added documentation, `sandbox: true` creates a sandbox 'compatible' renderer process, but doesn't actually enable the sandbox. The command line argument I've added is also required.
See discussion here: https://github.com/electron/electron/pull/9054#discussion_r108695652
