better chroot'ing detection