nested warden: add comments and a test for outbound traffic
Revert "Remove cleanup of old cgroup mount"

This reverts commit e932f255e2e420ec9868b3b1c0ea26eaac42dc26.
add back the src_path filestat check before doing actual bind_mount