use VC_IATTR_IMMUTABLE flag too
drwxr-xr-x - util-vserver