--incompatible_sandbox_hermetic_tmp=<true or false>
If set to true, each Linux sandbox will have its own dedicated empty
directory mounted as /tmp rather than sharing /tmp with the host
filesystem. Use --sandbox_add_mount_pair=/tmp to keep seeing the host's
/tmp in all sandboxes.