allow_writeable_chroot