If you use cannywrapper.sh, the wrapping of e.g. dev and proc messes up a lot of tools. To allow simple pass-through of character files that do not change should be simple enough.
It's a bit more messy when filesystem metadata changes.
It is even more messy to allow creation of fifos in cannied directories. ... ...