add CLONE_NEWUSER/CLONE_NEWPID to unshare flags