Sandboxing AI Agents: The One Control That Actually Matters