Please set VARTEXFONTS=${T}/fonts to prevent sandbox violations
"[it's better to use insinto/doins for .pdf files]"