Comment by sargun

user namespaces are a super rad feature. They've protected us at $WORK from multiple vulnerabilities that have come out.