Sandbox.py: Rename __root to _root to allow its use by subclasses.

Since access to get_directories is now blocked for some plugins,
and the subclasses of Sandbox do not have configuration defined
by YAML files, they need another way to get at the root directory.

NB Could this be done just with get_virtual_directory and .external_directory?