OFSandbox: Add support for unveil()