compatible with file system sandboxing by extension