Grant sandbox_t access to lib_t:file execmod. @ldunn claims all responsibility for this change.