usersubject: allow common login users to traverse mnt_t dirs