Unit tests for sandbox failures

We should check that our sandboxing code blocks what it's supposed to block. This seems like something to do in a program to be invoked from a shell script.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information