added secure-mount, new-namespace and rpm-fake.so rules