don't chroot python, it should be done by the filter it it wants to