File system can be sandboxed