remove requirement for _GNU_SOURCE define
fix comment
update copyright date
MS_REC is available now
do unshare operations at once and stop pretending we start a new PID namespace
make encapsulate work on shared-/ systems like Fedora
implement manual recursive read-only remount
getcwd is too clever somehow. use $PWD