Make sandbox code work with chutney, strong enough to be plausible

Using the sandbox code with chutney crashes.

Also, it doesn't restrict rename(), which makes restrictions on open() kind of pointless.