at least one thing fail as I observed, when untar rootfs package for dea job, a lot of device node need mknod.
otherwise we will fail because of Operation not permitted. (and we want share the same package from cf-realase master)

and since warden-cpi are the only consumer of nested warden, we see no requirement to restrict devices access for it right now.