may_see_all_namespaces
return may_see_all_namespaces();
if (owning_ns && !may_see_all_namespaces()) {
bool may_see_all_namespaces(void);
kls->userns_capable = may_see_all_namespaces();