The rbash'd user needs limited access these files or they can break the containment.