SecureProcess: If cwd is not given (and therefore should be inherited from parnet), check if the token allows access to the directory, and if not, uses the temp directory. this is better than just globbering the inherited parent CWD for no need if it actually can be accessed fine.