limiting entry points with rootfs_entry

[dcmiddle]

In #109 (in occlum) we opened things up to the root path. We should discuss whether we need limitations elsewhere in enclave-cc to prevent abusing that flexibility, or whether this does not really pose additional security risk.