[yencabulator]

The "portals" mechanism can dynamically allow access to anything you pick in a file open dialog, while helping the app sandboxed.