Merge pull request #12648 from estesp/userns-impl

Phase 1 implementation of user namespaces as a remapped container root