launch a command in a new PID namespace