Allow the Sandbox to work in FastCGI mode

Passing through the FastCGI DOCUMENT_ROOT unmolested, in particular
allowing it to be empty(), is what the Sandbox requires.