mount: only root can do that