openstack-ansible-security/doc/source/developer-notes/V-38654.rst

Exception

Although neither Ubuntu 14.04 or openstack-ansible mount remote filesystems by default, deployers are urged to use the nosuid option on any remotely mounted filesystems whenever possible.