tun: There is no longer any need to deny changing network namespaces