always permit mknod

you have to be root do this anyway, i.e. the process being run privileged.
mknod is the least of our security concerns in that case.

also remove all remaining references to allow_nested_warden