userns: Kill nsown_capable it makes the wrong thing easy