It's certainly an issue if they're mounted in place, but is it an issue if the chroots are bind-mounted in /var/run/crouton?  If not, then the grep should be `"^$CHROOTS"` to avoid misdetections.