Yes, run_bundle could probably use pivot_root. Though it would be hard for run_bundle to completely avoid the need for root permissions due to the fuse issues I talked to you about.