the API is the same, but you don't get access to the entire file system