user namespace and fully visible proc and sys mounts

Hi, So we've been over this many times... but unfortunately there is more breakage to report. Regular privileged and unprivileged containers work a