Address reported security bug in chroot mode (CVE-2013-1889). Improve chroot behavior in drop capability mode.