Add a rootfd to simplify handling of relocation
Add sha256_fileat function
Simplify relocation support by using using *at functions