nix: enable build-use-sandbox for Android

Signed-off-by: Jakub Sokołowski <jakub@status.im>

nix/nix.conf

@@ -9,3 +9,5 @@ max-jobs = auto
 # Helps avoid removing currently used dependencies via garbage collection
 keep-derivations = true
 keep-outputs = true
+# Extra isolation for network and filesystem, doesn't work on MacOS
+build-use-sandbox = false

scripts/release-android.sh

@@ -63,6 +63,7 @@ if [[ "$(uname -s)" =~ Darwin ]]; then
   )
 else
   nixOpts+=(
+    "--option" "build-use-sandbox" "true"
     "--option" "extra-sandbox-paths" "${KEYSTORE_PATH} ${SECRETS_FILE_PATH}"
   )
 fi