Container Runtime Vulnerability Mitigation Using User Namespace Isolation