Fix two bugs:

* Set proper perms on /dev/* entries inside PBI container
* Add some locking when doing nullfs mounts, since doing two at once seems to deadlock the system