This adds a safe function for opening files via ExternalBotHandler. This restricts open calls to a bot's local directory. Finalizes #9