Claude Code's sandbox.denyRead doesn't stop the Read tool | Dark Hacker News