Add ability to restrict possible mount paths

[soenkeliebau]

Pods can specify absolute paths for mounting config maps into (zookeeper needs this for example). It would be good to be able to restrict this so that only specific directories can be targeted with this.