Claude Code's sandbox.denyRead doesn't stop the Read tool | Hacker News Reader