User namespaces support based on graph driver-driven image mapping approach

Why isn't this just called `TranslateUids`? It's more readable.