fn do_chroot(r: &Req<'_>) -> Result<Outcome, i32>
chroot: the guest root is a no-op, anything else is refused as it would be for an unprivileged process.
chroot