Some autopkgtests use namespaces. It's probably reasonable to allow this, by adding `security.nesting=true` to the `debusine` profile in Incus. We should: * Document this * Update our setup script * Update the debusine.debian.net and debusine.freexian.com workers.