Why does snap-confine need to be setuid, rather than use a user namespace?
[dead]
Snap supports programs running as real root. Would those work with user namespaces?
[dead]