r/o bind mounts: give permission() a local 'mnt' variable