I'd noticed, that (at least in 2.6.31 kernel with grsecurity patches) read-only binds actually are read-write for some reason (still, stracing shows, that mount is done with correct flags). Is that known issue?