sandbox: Add 'sb' command to access filesystem features