With rssh_chroot_helper it's possible to chroot behind restricted directory.
vulners.com/securityvulns/securityvulns:doc:10824
vulners.com/securityvulns/securityvulns:doc:10849