Function validate_spec_for_new_user_ns 

pub fn validate_spec_for_new_user_ns(
    spec: &Spec,
    syscall: &dyn Syscall,
) -> Result<(), LibcontainerError>

checks if given spec is valid for current user namespace setup