pub fn parse_a_sandboxing_directive(tokens: &[String]) -> SandboxingFlagSet