Forbid non-root from shelling into a machine that is running in the root user namespace. Follow-up for adaff8eb35
adaff8eb35