Mount /proc with hidepid=2

https://www.kernel.org/doc/Documentation/filesystems/proc.txt

Please note that you don't see this in /etc/mtab, as the /proc entry is
created further down rc.S with 'mount -f'.