ErrorMessageForUI returns the error message of an error, rewritten for simplicity in the UI.

NewOnlyRootFS returns a new FS that only allows access to the root directory.

NewSingleFileFS returns a new FS that only allows access to a single file.