client { enabled = true template { disable_file_sandbox = true function_denylist = [] } }