[dsnuh]

Just me or does this read like the proposed solution to move the security boundary from cluster to namespace is to have a cluster per namespace?

[nassyweazy]

Yeah, I don't quite understand it either as it'd be pretty similar to have one process per PID ns at the operating system level.