This directory must exist, even though it may be empty. It is used to temporary mount the rootfs of lxc in a private mount namespace only visible by the processes running in the container.