Nested containers issues (permissions, zfs, possibly something else)

[stgraber (Stéphane Graber)]

Apparently masking all of /sys/kernel/security/ with mount -t tmpfs tmpfs /sys/kernel/security/ works.