generator: capabilities prevent remount,ro of host fs on guest shutdown