Draft: Indicate when an app has permissions to escape the sandbox

The description string "Can escape the sandbox and circumvent any other restrictions" is much longer than the other entries, so we might want to replace it with something else.

Fixes #838 (closed)