sandbox: Permit stat() of DataDir/stats

This is a fix for another case of 12064 that alphawolf just spotted.

There's already an 0.2.5.5 changelog entry for this.