The requirement for
ChrootDirectory: all components of the pathname are root-owned directories which are not writable by group or others.