Create an extra namespace for build environments and private network.

Create a python binding for unshare(2) and use this to
unshare the IPC and UTS namespace (if the kernel supports that).

Also add the option to use private networking in the container.