lock chroot

prevent breach even with relative path for getInitialCwd

fix asylumfunk#9