Integration testing

Rename Syscall_FS.

Improve error stacks. Inline undo functions in order to position the
gerror constructor calls closer to the source of the corresponding
errors.

Ensure SyscallFS is constructed with root privileges.
Rebind bind mount read-only

See https://lwn.net/Articles/281157/