Allow chutney users to disable tor's sandbox at runtime

In legacy/trac#32240 (moved), we discovered that tor's sandbox doesn't work on recent Ubuntu versions. So we need to disable the sandbox on those CI jobs.

One good way to implement this change, is by making it a first-class chutney feature.