userns: allow sethostname in a container