Put the child in a new mount namespace.
const CLONE_NEWMOUNT: CloneFlags = CloneFlags(cty::CLONE_NEWNS);
clone(2) and CLONE_NEWNS therein