Rewrite XLXC; containers strictly use host bind mounts