way: don't export the fs internals to innocent userspace programs which just want to mount the file system.