Blocking Namespace Manipulation with Sentinel Policies