Finally wrote a blog post that was good enough to post again:

Sandboxed macOS X login items with XPC orangejuiceliberationfront.com/sandboxed…