agent: writable mounts

A change in libcontainer Mounts makes them nonwritable by default.