Booleanize, and fix a minor bug introduced whe facctoring out sandbox().

That is, when running sandboxed synamic interface tracking should be
disabled, or at least was in NTP Classic. Seemed to work fine without
this under Linux, but maybe it's necessary on some other port.  We're
being careful here.