pub fn validate_bind_mount_source_policy(source: &Path) -> Result<PathBuf>Expand description
Validate bind-mount source policy without requiring the source to exist.
Topology persistent volumes use this before creating missing host paths, so sensitive host locations are rejected before any mkdir/chown side effects.