Comment by remram

Creating a mount namespace and using pivot_root seems like a safer solution.