(multiple rdonly mounts are still allowed) * shuffle some assignments to avoid leaking resources in error branches