cc @benjy who has worked extensively with our chroot code