provide custom entitlement files for each build configuration. sandboxing is just a capability AFAIK.
entitlements file is a build setting and build settings can vary based on configuration
see screenshots for explanation
- shows where to manage configs.
- shows how I cleared the build setting for Release but left it for Appstore