File: use String API to not depend on builtin String implementation
add builtin File.list for listing directory contents
automatically authorize builtin access