Interpreters and vm-invoked processes also need to obey root and base path rules