diff --git a/binhost.sh b/binhost.sh
index 5de8b8a..f8892c5 100755
--- a/binhost.sh
+++ b/binhost.sh
@@ -54,10 +54,6 @@ echo "Packages to build: $(wc -l < "$CTX/var/lib/portage/world")"
 # make.conf
 mkdir -p "$CTX/etc/portage"
 cp "$REPO/binhost/make.conf" "$CTX/etc/portage/make.conf"
-{
-    # we don't want build to fail bcs of EULA check..
-    echo 'ACCEPT_LICENSE="*"'
-} >> "$CTX/etc/portage/make.conf"
 
 echo "Starting Builder..."
 
@@ -99,7 +95,7 @@ echo "> Setting Profile..."
 eselect profile set "$PROFILE"
 
 echo "> Building World..."
-emerge --verbose --buildpkg --update --deep --newuse --changed-use --with-bdeps=y --keep-going @world
+emerge --verbose --usepkg --buildpkg --update --deep --newuse --changed-use --with-bdeps=y --keep-going @world
 
 echo "> Cleaning up..."
 emerge --depclean
diff --git a/binhost/make.conf b/binhost/make.conf
index 9522862..1fc1e5a 100644
--- a/binhost/make.conf
+++ b/binhost/make.conf
@@ -23,6 +23,7 @@ VIDEO_CARDS="intel nouveau"
 
 # "buildpkg" = generate binary packages upon install
 # "binpkg-multi-instance" = keep only latest version, but support slotting
-FEATURES="${FEATURES} -getbinpkg buildpkg binpkg-multi-instance"
+FEATURES="${FEATURES} -getbinpkg buildpkg binpkg-multi-instance -ipc-sandbox -network-sandbox -pid-sandbox"
+ACCEPT_LICENSE="*"
 
 BINPKG_FORMAT="gpkg"