Put the child in a new user namespace.
const CLONE_NEWUSER: CloneFlags = CloneFlags(cty::CLONE_NEWUSER);
clone(2) and CLONE_NEWUSER therein