Put the child in a new network namespace.
const CLONE_NEWNET: CloneFlags = CloneFlags(cty::CLONE_NEWNET);
clone(2) and CLONE_NEWNET therein