Eh, Pastebot for Mac is sandboxed, but can self-update. How does that work?