userns: don't allow uid <= 1000