macOS: App sandboxing via sandbox-exec | Hacker News Reader