Currently filesystems newly mounted on the host after RootlessKit has started cannot be seen from RootlessKit namespaces.

This could be solved by supporting non-private mount propagation.