sandboxed filesystem ok