How do other OSes’ sandbox implementations keep track of temporary authorizations to files?