Accept an IO instead of a file path in sandbox upload.
Read the file/io passed to SandboxUploder directly, avoid leaking open files