I just noticed that the temporary sandbox exception "com.apple.security.temporary-exception.files.home-relative-path.read-only" no longer seems to be working for my app. Here's how I have it set in my entitlements:
<key>com.apple.security.temporary-exception.files.home-relative-path.read-only</key>
<array>
<string>/Library/Compositions/</string>
<string>/Library/Graphics/Image Units/</string>
</array>
Is this a known issue, and is there a known workaround? Maybe there's a non-temporary entitlement that I've not been able to find yet?