review fixes + added rebind test

-changes based on Sam's review on Gitter.
Interesting to use `runAsRoot` rather than `sudo`. It looks like it does the same thing under the covers (i.e. will be wrapped in `sudo`), so this is fine.