As I said in containerd/cri#1208, containerd will get nil of readonlyPath from gRPC if "procMount=unmasked" set.
But containerd/cri#1570 make it do nothing, we should revert it.