the jailed filesystem - kind of explained