After looking more it appears that I was doing something that only works when targetting a chroot environment. My mistake.

It would be interesting to think more about user-level applications and how that sort of trust would work, if it could.