Filesystem mounts in user namespaces — one year later

This situation appears similar to that of network filesystems. If a filesystem is exported to the local network, anyone who is root on a box on the network can mount it and create many of the same problems described here. Perhaps some of the concepts from nfs like exports and usermappings can be used in the user namespace situation.