Filesystem sandboxing script using unionfs to deal with all-in-one bloatware