Add support for running in Appliance mode, which restricts access to
only jails, not the base system