We need to be able to set the initial mode / ownership on bound directories when containers are started for the first time.