pass chroot command to /bin/sh

this allows us to specify an arbitrary chroot command, i.e. for sudo