Just a heads up, you may need this if your app reads or writes from an open or save requester...
com.apple.security.files.user-selected.read-write
But my app crashes now with open and save since making it sandboxed.
There are other "keys" too, depending on what your app does.
