don't we need to use the sandbox to get read/write rights on Mac OS? I remember talking about sandboxing of new files with rryan when he merged his sandbox code but I don't remember if we need to do it or not. 

@rryan can you add some documentation to the sandbox class explaining when it should be used and why