pid namespaces: introduce MS_KERNMOUNT flag