implement chroot and /dev/u?random support