To not expose dom0 processes like blkid for attacks from VM (e.g. by placing malicious filesystem header in private.img).