Just added more context here,
https://github.com/sandstorm-io/check-for-unprivileged-userns