The text a6dc36ec8a5e, as Debian 10 (Buster) shipped it.
Run a task in a new set of namespaces.
lxc-unshare(1) on Linux now