Open /proc/PID/ns/* read-only to avoid getting permission denied
    
    lxc-enter-namespace stopped working on recent kernels (at least 3.19+)
    due to /proc/PID/ns/* file descriptors being opened RW. From outside
    the namespace these can only be opened RO.