# set up snap-specific private /tmp dir
    /tmp/ rw,
    /tmp/snap.*/ rw,
    mount options=(rw private) -> /tmp/,
    mount options=(rw bind) /tmp/snap.*/ -> /tmp/,