issue 1235: Prevent users from removing /tmp and /sys namespaces