pidns: limit the nesting depth of pid namespaces