Allow nstar setns to fail

If the container is privileged it won't be running in a user namespace.

[#83806940]