Add safeguard around "semodule -n -d sandbox"
    
    Each time this package is updated, it remove the sandbox module, thus
    making the sandbox command not working until someone reenable it.
    
    The main cause is likely the non intuitive ordering of RPM post install
    script, as %preun is run after %post. See the details on
    https://fedoraproject.org/wiki/Packaging:Scriptlets