an attacker rule must not be able to importstr this from a sibling sandbox directory
