wvkbd: sandbox with bunpen

hosts/common/programs/sane-input-handler/sane-input-handler

@@ -166,8 +166,14 @@ toggleKeyboard() {
     return
   fi
 
-  # `env` so that we get the right `kill` binary instead of bash's builtin
-  env kill -s RTMIN+0 "$keyboardPid"
+  for p in $keyboardPid; do
+    # `env` so that we get the right `kill` binary instead of bash's builtin
+    # `kill` only one keyboard process. in the case of e.g. sandboxing,
+    # the keyboard might consist of multiple processes and each one we signal would cause a toggle
+    if env kill -s RTMIN+0 "$p"; then
+      break
+    fi
+  done
 }
 
 ## DISPATCHERS

hosts/common/programs/wvkbd.nix

@@ -8,7 +8,7 @@
       '';
     });
 
-    sandbox.method = "bwrap";
+    sandbox.method = "bunpen";
     sandbox.whitelistWayland = true;
 
     env.KEYBOARD = "wvkbd-mobintl";