vfs: introduce clone_private_mount()