Work around sandbox not sandboxing directories