open up the install_recovery domain that chainsfire uses for SuperSu so it acts as unconfined