The new mount api makes it possible to atomically create read-only binds mount together with mount_setattr.

https://www.man7.org/linux/man-pages/man2/mount_setattr.2.html

Relates to #744