only allow root to mount tmpfs, even if usermount=1

discussed w/ and ok natano