Filter out X11 root window property queries.
There's a whole host of X11 root window properties that leak various bits of information about the host system. These should be filtered out, and now can be because the sandbox has an X11 proxy that can do protocol inspection and response rewriting.