userns: limit the maximum depth of user_namespace->parent chain