Harden the default configuration (just a little bit)
Daemon now runs within a chroot by default.