Just added more context here, https://github.com/sandstorm-io/check-for-unprivileged-userns