Bug 1656263

Description of problem:
The customer reports -
CephFS documentation [1] is not clear enough that every cephfs keyring should **only** allow cephfs client's writes to the cephfs data pool(s). Failing to do so could potentially lead to disastrous consequences.

Here is the related part of the CephFS documentation:
"To restrict the client to only mount and work within a certain directory:"  <------- this has the admin thinking that the keyring will only allow cephfs access but it actually allows any other kind of writes including destructive on any pools in the cluster.

"To restrict the client to only write to and read from a particular pool in the cluster:" <------- this looks like this part is optional.

[1] https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/3/html-single/ceph_file_system_guide/index#creating-ceph-file-system-client-users

Version-Release number of selected component (if applicable):
RHCS3.1

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: