Is it possible to add entitlements to an already compiled app dowloaded from a random place? A mac app installer could run any scripts, so we need to sandbox the installer, if it's possible.