Sandbox bypass via import-guard race

Logic flaws in PluginImportGuard in jahlives openssl_encrypt before 1.4.0 allow local users to bypass module blocking and corrupt audit logs. In plugin_sandbox.py, restore_hidden_modules() records the hidden-module count after hidden_modules.clear(), always logging zero, while hide_dangerous_modules() removes entries from sys.modules before the import hook closes the gap. Reachability is local to code running in the same process, and the race matters in multi-threaded use; published evidence supports misleading security logs and temporary access to blocked modules, not broader code execution.