Also, /system is mounted rw in bootpwn, from which chef is run.