Michael Kerrisk (man-pages) [off-list ref] wrote:

quoted

+To access the source mount object or the destination mountpoint, no
+permissions are required on the object itself, but if either pathname is
+supplied, execute (search) permission is required on all of the directories
+specified in
+.IR from_pathname " or " to_pathname .
+.PP
+The caller does, however, require the appropriate capabilities or permission
+to effect a mount.

Maybe better: s/effect/create/

The mount has already been created.  We're moving/attaching it.  Maybe:

	The caller does, however, require the appropriate privilege (Linux:
	the CAP_SYS_ADMIN capability) to move or attach mounts.

David