nfsd: restrict filehandles accepted in V4ROOT case