partly because the QA notices about untraceable static binaries that 
sandbox-1.6 emits, but mostly because i wanted to bust solar's balls, i did a 
mini hack fest the other nite and added ptrace() support into sandbox for 
static binaries.  seems to work for me, but if someone notices something new 
and freaky, you've been warned!

side note, i think sandbox-1.6-r1 should be good for stable.  only one minor 
compliant about 1.6, and that's fixed in 1.6-r1.
-mike