netns: make nsid_lock per net