make the chroot implement its own version of everything that mirror exposes; no more transparent passthrough