CSI volume mounts used by Pods live under:
If the filesystem of the mounted volume doesn't support xattrs (e.g. FUSE),
relabeling fails, and
podman run exits with error.
/var/lib/kubelet may still need to be relabeled, but maybe we can do this at node creation time?
Closes: #19 (closed)