added support for sip

Under `Library/Containers`, but should be safe to merge since it only concerns files, and not directories.