if (cap_rights_limit(routefd, &rights) < 0 && errno != ENOSYS)
error("can't limit route socket: %m");
pidfile_close(pidfile);
if (chroot(_PATH_VAREMPTY) == -1)
error("chroot");
if (chdir("/") == -1)