kernel.unprivileged_userns_clone=0
https://github.com/Kicksecure/security-misc/issues/274
panic_on_warn=1