[Feature Request] Make option for "all passthrough" (i.e. disable import isolation part of sandbox)

[cretz]

Describe the solution you'd like

Today we allow you to specify a certain set of passthrough modules when configuring the sandbox runner, but it only works if you know the module name (but it is hierarchical). Some users may want to pass through everything regardless of root module, so we should probably add a SandboxRestrictions field for passthrough_all_modules: bool.