should virtiofsd map user ids to drop root?

virtiofsd having access to the host fs (which is unaware of the vm) feels like a big risk. dropping root would make me feel easier about that.

A file system shared to the vm could just use a different id for root and virtiofsd could either map that itself or use user namespaces.