Snap supports programs running as real root. Would those work with user namespaces?