Sandbox bash deny file-write-create