Create secrets dir in bwrap

Since the mountpoint for the tmpfs used for playbook secrets may
itself be on a read-only bind mount inside the bubblewrap environment,
ensure that it is created before bwrap runs.

Change-Id: I493d1b33500c23d4e2c1458247345cc751757a0b
1 file changed