Should probably use "ip netns" commands here instead of nsenter, to avoid having another binary we have to ship. "ip netns" would work better than "switchns" in this case as well.