Zip file unpacker, sandboxed using MinSFI