HomeIsabelle/Phabricator

further attempts to confine dotnet to $ISABELLE_HOME_USER;