i've always hated chroot(2)'s inability to correctly deal with
leter normal users do this.  from a security perspective, the
functionality is really nice, but having to be root *first* is
a lose...