Clod – run Claude Code in a modestly more secure way