And user namespaces are really close to being merged: https://github.com/docker/docker/issues/15187