make sure chrome sandbox is owned by root code example

Example: The SUID sandbox helper binary was found, but is not configured correctly.

sysctl kernel.unprivileged_userns_clone=1