Comment 10 for bug 1655906

There is an upstream kernel fix for this:

https://lists.linuxfoundation.org/pipermail/containers/2017-January/037759.html

Until this is merged and then backported, I appended a workaround whereby runC's init process will only set itself undumpable when it is not running in a user namespace.