r/o bind mounts: rearrange may_open() to be r/o friendly