Feature request:
Add a "block" option to the [fs] section of profiles.
"hiding" files and directories is not enough for me. I dont' want my sandboxed application sniffing around.
the "block" option should disallow opening any filedescriptors pointing to a "blocked" path.