pub fn validate_bind_mount_source(source: &Path) -> Result<()>
Validate that a bind mount source exists and is not a sensitive host path or subtree.