allow sideband entry into a namespace using nsenter