Clarify rootfs contract with respect to the root user

The contract is that the provided SyscallFS instance must not be nil. This ensures that the caller has the necessary privileges.