ntpd has a -i option to chroot itself, which the ntp-simple package isn't using. Is it worthwhile using it given that it does switch to a non root/restricted user?