nspawn: don't accept just any tree to execute

When invoked without -D in an arbitrary directory we should not try to
execute anything, make some validity checks first.
update TODO
nspawn: if we don't find bash, try sh