I've got a sandboxed app with a sandboxed XPC service. I've read the documentation, and if I understood correctly only my app can launch the XPC service, but it's not clear if other apps can connect to the XPC service or if the app sandbox is enough to prevent other apps from connecting to my XPC service.