Add another simple example to lock down user resources. Remove the
commented out sandbox entry, we already have something above.