Sandboxed Mac apps can record screen any time without you knowing