postprocess: Use run_sync_in_root() for other subprocesses

Let's use these new libcontainer bits instead of invoking chroot().
It's stronger security.