This means we only change netns by execing nsenter: changing netns in Go is unsafe for long-running processes like the proxy.
This means we only change netns by execing nsenter: changing netns in Go is unsafe for long-running processes like the proxy.