Codex does not prevent reads outside the working directorygithub.com/openai2 pointsthomas342987 months ago