status: Fix non-root after [5be96a1a42] while keeping jail roots private