Its integration code, for third party services. Both read and write. So by nature you need to access the internet, but not the local network, and you need some

Its integration code, for third party services. Both read and write. So by nature you need to access the internet, but not the local network, and you need some file system access, but not much. We also pay for cpu cycles, so preventing bitcoin mining is another one. Basically do anything, but access our internal services, siphon out data in transit, mine bitcoin. (Also before people say sandboxing wont solve all of this. I know. :P )