* rework sandbox enforcement to use sandboxes table as source of truth

* remove test that no longer reflects expected behavior

* cleanup & refactor

* clarify docstring

* update segmented-user? to use new helper functions

* fix tests

* address comments