Update code to punt almost everything off to libcontainer's `namespaces.SetupUser` function (which does exactly what we want to be doing)