mode 700 for chroot dir