add privilege checks etc to support user mounts