nsenter can open namespaces from filesystem rather than from pid 

This allows entering namespaces independently of the processes inside it.
+1