Nice work.
I take it this isn’t enough?
grubby --args=“user_namespace.enable=1” --update-kernel=“$(grubby --default-kernel)”