Try to rename SandboxFileBroker to SandboxBroker
Switch to UniquePtr<Policy>
Shuffle policy method args
Now there's a policy; and assorted fixes.
"Fix" the desktop case.
Drop uid/gid on file broker thread.