...at least in a couple of places, and at least for a sandboxed macOS
build that check does its job, it prevents write attempts into the app
bundle.

Change-Id: I6d243d3e8a4c77f03a8265125aefd75becbf0998