Make rootfs_test pass again

Ensure overlay function returns an error.

Treat /tmp/guardian differently. Create it if it doesn't already
exist and do not clean it up on failure since other containers
may be using it by then.