Add noexec,nodev,nosuid when remounting shared directory in virtiofsd
The virtiofsd process does not need to execve(2) or open device nodes. It's worth investigating whether the sandbox setup code can set the noexec,nodev,nosuid mount options when remounting the shared directory. This would improve security or add additional layers of security aside from seccomp.