mount: do not bind root (breaks stuff)
pflask: use child return code as return code
pflask: add --no-{user,mount,net,ipc,uts,pid}ns options
pflask: re-enable user ns
user: map user to requested container user
pflask-debuild: rewrite
pty: fix detaching when --detach is not provided
pflask: actually daemonize on --detach
pty: check credentials of attaching processes
README: add some examples