allow optional --sysroot=/rumproot (for things like rumprun)