create namespaces in a single unshare call

obviously separate calls to unshare are not identical to a single call with all the flags
now I can mount the /proc filesystem