1. A method of a client device comprising: constraining an executable environment in a security sandbox; executing a sandboxed application in the executable environment using a processor and a memory; and automatically instantiating a connection between the sandboxed application and a sandbox reachable service of a networked media device.