Sandbox wrapper for filesystem.