enable RESTRICT_ROOTFS_SLAVE