Don't double-enforce limited root and chroot