Clang's rewriter currently violates the IO sandbox due to a call to `llvm::writeToOutput()`. Since the "blessed" `llvm::vfs::OutputBackend` isn't easily available in that particular spot, this PR instead disables the sandbox and leaves a FIXME behind.