EDS keeps changing its D-Bus API and we can't really rely on it matching the host. Thus, make EDS run nested to the sandbox.