ls checks startswith root path for sandboxing