Chroot program so client can't navigate entire file tree