need to have a static fd open before for on /dev/ctf, then patch binaries to use that fd instead of open /dev/ctf when using chroot

[bool101]

Gatekeeper implements this as the -k option to leak a fd on 1337. patching binaries will need to happen manually-ish.