Linux-native "fake root" for implementing rootless containers
