factored out all non-openvz related rootwraps