isolate: Ensure mount namespace is private.

systemd since 188 mounts filesystems as shared, which means that all bind
mounts are shared with all other namespaces, which defeats the purpose of the
private filesystem namespace.