com.apple.security.app-sandbox com.apple.security.application-groups group.com.userscripts.macos com.apple.security.files.user-selected.read-write