Security Bugfix: added ro of init-script

The former mount of $rootfs/sbin/init allowed to modify the init script of the container so harm could be done to the host system at the next execution of lxc-start or lxc-create -t sshd