security: pass mount flags to security_sb_kern_mount()