The OpenSSH daemon commonly has its own security
feature called privilege separation and hence it
is not designed to work with chroot. This patch
runs the OpenSSH daemon itself chrooted to the
jail. The chroot is called only after the keys are
loaded, so you can store your private keys and
sshd_config outside the chroot jail. Once the keys
are loaded, sshd runs chrooted.
