Network access-control rules for a sandbox's proxy sidecar.
Supported pattern types: exact domains, globs (e.g. *.example.com),
IPs, CIDR ranges (e.g. 10.0.0.0/8), and regex (~pattern).
Only one of allow_list and deny_list may be populated.
interface SandboxAccessControl