New namespaces are not allowed within unprivileged docker containers, thus skip it.
Read per-user configuration files from /etc/apache2/suexec-sandbox.d/UID, that can override directives from the global (default) config.