userns: Don't allow creation if the user is chrooted