Mount chroot in shadow directory in /var/run/crouton

Much cleaner, more consistent, provides better user output, and avoids the need to `--make-unbindable`.
Also fixes some bugs.