We currently rely on an undocumented flatpak env var (FLATPAK_BWRAP) which seems to be required only for their test harness... So a better long-term solution for us might be to not use flatpak run anymore, since its options don't cover our use-cases anyway (like bind-mounts).