I'm trying to figure out Claude Code's sandbox mode, and at least on the file system side, it seems to be able to use Write to write outside the initial directory. When I ask it to use Bash, it's blocked initially and automatically figures out how to workaround it. Any tips