do_add_mount() should sanitize mnt_flags