LSM: bury struct security_mnt_opts