Made it harder to escape the filesystem sandbox