In particular:
- suspend the mount around vflush() to avoid new writes come after the vnode is processed
- flush pending metadata updates (mostly node times)
- remap all rw mappings of files from the mount into ro (this is not clear to me how to handle best, might be revoke the mapping at all)
- disable metadata updates after the mp is ro