How macOS sandbox security scoping and capabilities work for URL bookmarks | Hacker News Reader