move mount_setup_early() call to main.c, before security module setup, so there are no more repeat calls.