Add ro mount option to bind mounts as extra security measure