Post #1495850

This feature is lovely, because it unblocks nested containers: you can put unpriv nspawn in unpriv nspawn and it will work reasonably, with privilege separation and everything.