docker.service: remove mount private