An excursion into a mount propagation bug

"Once the mechanics of the bug are understood it’s easy to trigger. Because of unprivileged user namespaces it is available to unprivileged users."