Mark / as a slave-type mount before starting

This prevents mount events in / from propagating to already-created
child mount namespaces. See

	https://www.kernel.org/doc/Documentation/filesystems/sharedsubtree.txt
Enable automatically at installation

But do not start.