run: Setting --qemu_sandbox=on by default

This commit sets the Qemu sandboxing to 'on' by default. It allows the
user to run all tests using this feature to catch missing system calls
and providing more feedback to the general security of Qemu.
Signed-off-by: NEduardo Otubo <otubo@linux.vnet.ibm.com>