Optimize for size by default
Remove checks about mount destinations

Only check about src path of --bindfs. This is reasonable considering
the fact that NO_NEW_PRIVS is set and unpatched Linux kernel allows
non-root users to create user namespaces, to have all capabilites,
therefore are free to mount things.