Ujail: allowing additional processes, libraries and paths

I am trying to push information via MQTT and a dnsmasq script (possibly a lua script in future, see https://forum.openwrt.org/t/acting-on-events-from-uci-pushing-dhcp-information-to-an-external-host)

However, I'm being stymied by ujail

Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: /usr/lib/dnsmasq/dhcp-script.sh: /data/dhcpscript.sh: line 2: cut: not found
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: /usr/lib/dnsmasq/dhcp-script.sh: /data/dhcpscript.sh: line 2: tr: not found
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: Error loading shared library libmosquitto.so.1: No such file or directory (needed by /usr/bin/mosquitto_pub)
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: Error loading shared library libcjson.so.1: No such file or directory (needed by /usr/bin/mosquitto_pub)
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: Error relocating /usr/bin/mosquitto_pub: mosquitto_int_option: symbol not found
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: Error relocating /usr/bin/mosquitto_pub: mosquitto_property_add_int32: symbol not found
Sun Oct  1 16:15:18 2023 daemon.debug dnsmasq-script[1]: Error relocating /usr/bin/mosquitto_pub: mosquitto_disconnect_v5: symbol not found

This doesn't seem to be very well documented. I would have thought I'd be covered by editing DHCPSCRIPT_DEPENDS in /etc/init.d/dnsmasq

How do I allow additional libraries to be loaded? I'm happy for ujail to 'protect' me, but not happy for it to restrict what I can do with my own equipment.

I'm pretty sure I got bitten by https://git.openwrt.org/?p=project/procd.git;a=commit;h=04d7570f473ca2a657a89f74ac4027f6c94f4305 as well.

how/where is the DBGLVL environment variable set?