This avoids the "Dconf forwarding problem by preferring the keyfile settings backend when we are inside a sandbox.