--incompatible_sandbox_hermetic_tmp=<true or false>
If set to true, each Linux sandbox will have its own dedicated empty
directory mounted as /tmp rather thansharing /tmp with the host filesystem.
Use --sandbox_add_mount_pair=/tmp to keep seeing the host's /tmp in all
sandboxes.