comment about a private mount for the service
comment about a private mount for the service

show how to combine `nsenter` and privileged `ExecStartPost=` (prefixed
with a `+`) to make a private (possibly bind) mount for the service.

also `MountFlags=private` is needed.

gdamjan/uwsgi-deployments