removed chrootsafe.cc; such an implementation seems to be impossible...