[PATCH] r/o bind mounts: create helper to drop file write access