XgF: If you want to write things as statically linked _rust_ binaries, see e.g. https://github.com/sandstorm-io/check-for-unprivileged-userns (thanks to kmc)