I know Node has the new permissions model thing, but why can’t this be as easy as blocking all fs access above cwd? I’d love a global Node setting for this.