$TEST_ROOT typically contains read-only files/directories (e.g. the Nix store). So we have to make it writable first.