jail: ensure mounts are not MS_SHARED to avoid pivot_root() failure