 it does not only
    disable write access, but actually any kind of I/O
    (at least through these components).

    Another major disadvantage of black-listing is that it is fragile:
    should the sandbox run on a version of Alice that provides additional
    components that enable write access then the policy is no longer safe.
  </P>

  <P>
    A more realistic use of the <TT>"componentLoad"</TT> capability hence
    would be for white-listing external domains from which components may
    be imported