[sandbox] Implement in-process tmp dir creation