nsenter can open namespaces from filesystem rather than from pid 

This allows entering namespaces independently of the processes inside it.
We can also probably make a helper for this.