Confused about getting this to work with chromium

Hi! Thanks a lot for going to the effort of actually implementing this. I've been somewhat successful at sandboxing chromium with nixpak, with the notable exception of downloads so far. With your wrapper it seems to be more confident that it can actually download files (it doesn't show as deleted immediately after) but downloaded files still end up in a sandboxed directory (inspectable with `file://`) rather than on the host. Have you experienced this before?