Comment by wilt

It is because of user namespaces. I assume you can tell firejail to use seperate ones with some commandline switches.