allow healthd rootfs:file entrypoint;