New flag -k <cmd>. "<cmd> <path>" is executed after the rootfs is created, <path> points to the new rootfs.