So what is the correct path forward for a not sandboxed app?