What is the problem you're trying to solve

I would like a way to disable masked paths and read-only paths for /proc without needing to specify --privileged.

Describe the solution you'd like

Support setting systempaths=unconfined as a --security-opt option to match docker's CLI option (docker/cli#1808)

Additional context

No response