I think the point is that, whereas we'd like to be able to pivot the
root for a single process, in practice this causes startup issues to
which the easy solution is to pivot the whole system. At least that's
my reading of the man page.
It might be tidy if pivot_root could be used (instead of a hack based on
a chroot bug), but it'd still be unportable.
-