code: func addSecretsBindMounts(mountLabel, ctrRunDir string, defaultMounts []string, specgen generate.Generator) ([]rspec.Mount, error) {
  	containerMounts := specgen.Config.Mounts
  	mounts, err := secretMounts(defaultMounts, mountLabel, ctrRunDir, containerMounts)
  	if err != nil {
  		return nil, err
  	}
  	return mounts, nil
  }
docs: // addSecretsBindMounts mounts user defined secrets to the container